Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02c0dc83-24bc-3bb2-ba5b-be63a0c1f16b.roa
File: 02c0dc83-24bc-3bb2-ba5b-be63a0c1f16b.roa (raw, json)
Hash identifier: 7ZTuE7T+7krfQwOHTaG5gpTdYYCi10ihoIqMEJ4MLFc=
Subject key identifier: B5:7E:9F:F7:6D:3D:57:3E:35:E5:CD:85:83:52:25:F6:CE:B7:63:27
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848255F8745801953325E5F33C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02c0dc83-24bc-3bb2-ba5b-be63a0c1f16b.roa
Signing time: Mon 09 Dec 2024 05:24:16 +0000
ROA not before: Mon 09 Dec 2024 05:24:16 +0000
ROA not after: Sun 09 Mar 2025 05:24:16 +0000
asID: 13335
IP address blocks: 104.29.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:25:5f:87:45:80:19:53:32:5e:5f:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 9 05:24:16 2024 GMT
Not After : Mar 9 05:24:16 2025 GMT
Subject: CN=070af012-28b9-4fa6-923c-06145734c477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:39:8f:2d:f2:24:69:5c:19:c7:8a:ca:3a:
5d:a5:76:4f:25:dd:02:83:43:d9:95:a0:e8:e0:66:
9a:cc:ec:39:a7:ce:59:79:ac:ec:79:3c:37:1a:2f:
40:72:e6:39:b2:67:a0:6a:76:bf:3d:0a:4e:d5:18:
6a:58:50:9d:9a:7e:86:81:e7:ef:8f:aa:6f:82:4e:
55:90:a0:af:51:32:6a:5d:d0:18:29:8d:7a:48:28:
28:db:44:77:13:ad:4e:10:a2:e5:c0:7e:2d:0a:84:
57:1c:94:10:88:ef:33:af:05:59:39:4c:7b:8c:cb:
99:8b:f3:ab:5b:53:5b:d0:03:8f:a6:0d:61:cf:59:
6e:fd:cf:00:29:92:a8:55:fa:b7:c3:da:62:0f:94:
41:a6:0d:3d:d4:ea:44:65:c3:0a:23:cc:cf:9a:78:
01:0b:e5:d9:ab:26:5f:0d:b3:35:e9:0e:4f:bb:38:
7a:1b:11:48:46:c2:b7:43:55:86:be:f0:55:5c:26:
db:72:eb:8f:08:bb:e7:9e:2b:e9:11:de:03:cd:44:
c3:8a:4b:53:04:4a:49:4e:b3:87:e1:56:7b:87:17:
92:e6:fa:ca:a5:79:56:68:23:0f:56:ed:cd:06:50:
c7:2f:89:40:a1:0f:6d:88:f1:88:17:76:5d:25:a2:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:9F:F7:6D:3D:57:3E:35:E5:CD:85:83:52:25:F6:CE:B7:63:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/02c0dc83-24bc-3bb2-ba5b-be63a0c1f16b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
104.29.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:29:8a:bf:9f:77:75:40:94:4a:da:41:97:f9:bb:da:0a:16:
27:5c:9b:6b:04:17:79:7b:14:51:75:32:94:8f:a9:ac:50:75:
e0:e3:47:cf:ee:bf:05:93:35:4e:c8:21:fe:b0:2a:24:04:c9:
1a:6a:6f:df:9b:63:2f:8d:ee:63:1f:13:0b:21:bf:18:f4:67:
cb:b9:c8:ed:d8:c9:70:1b:a0:20:8b:74:1d:bf:e1:cc:3f:ff:
8e:0a:49:61:e0:79:ef:4c:be:9f:31:53:37:c5:3c:43:22:37:
67:4f:7a:af:1b:d9:88:5c:85:20:f1:16:0d:ed:ca:28:e4:a5:
5c:e4:ed:27:47:f5:a4:cf:d4:3a:c4:7f:eb:0b:70:d7:23:27:
f1:bb:53:1b:6f:f6:94:a2:69:9b:10:83:9d:01:ae:87:31:ae:
78:a7:f3:aa:6f:9b:0c:7b:97:7c:f3:86:75:5d:cc:71:7e:b6:
ae:68:7e:c2:1e:c2:16:a7:55:a2:d3:f3:f0:8a:84:94:37:56:
11:bd:e4:6b:3e:c1:22:cd:ea:35:75:7e:ce:e4:9a:ee:ec:2d:
72:68:d2:f7:2e:23:d9:72:ad:f3:a8:5a:cb:1b:c4:05:eb:34:
f4:3b:4f:8f:7b:8f:4b:20:2f:a0:a6:8d:62:9e:17:32:c1:cc:
c3:af:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:57:19 2025 by rpki-client